{\rtf1\ansi\deff0
{\fonttbl{\f0\fmodern\fcharset0\fprq1 Courier New;}}{\colortbl;\red0\green0\blue0;\red255\green0\blue0;\red0\green255\blue0;\red0\green0\blue255;\red255\green0\blue255;\red255\green0\blue0;\red128\green128\blue0;}\f0\fs18 
\plain\cf1\fs18 \par \plain\ul\b\cf4\fs18 Packet Info
\plain\cf1\fs18 \par   \plain\cf3\fs18 Packet Number:        \plain\cf1\fs18 18
\plain\cf1\fs18 \par   \plain\cf3\fs18 Flags:                \plain\cf1\fs18 0x00000000
\plain\cf1\fs18 \par   \plain\cf3\fs18 Status:               \plain\cf1\fs18 0x00000000
\plain\cf1\fs18 \par   \plain\cf3\fs18 Packet Length:        \plain\cf1\fs18 1180
\plain\cf1\fs18 \par   \plain\cf3\fs18 Timestamp:            \plain\cf1\fs18 13:07:36.577621000 12/20/2010
\plain\cf1\fs18 \par \plain\ul\b\cf4\fs18 Ethernet Header
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Destination:          \plain\cf1\fs18 D8:5D:4C:76:39:2A
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Source:               \plain\cf1\fs18 00:24:1D:EA:CB:C8
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Protocol Type:        \plain\cf1\fs18 0x0800  \plain\i\cf7\fs16 IP
\plain\cf1\fs18 \par \plain\ul\b\cf4\fs18 IP Header - Internet Protocol Datagram
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Version:              \plain\cf1\fs18 4
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Header Length:        \plain\cf1\fs18 5  \plain\i\cf7\fs16 (\plain\i\cf7\fs16 20\plain\i\cf7\fs16  bytes)
\plain\cf1\fs18 \par   Differentiated Services:\plain\cf1\fs18 %00000000
\plain\cf1\fs18 \par                         \plain\i\cf7\fs16 0000 00.. Default
\plain\cf1\fs18 \par                         \plain\i\cf7\fs16 .... ..00 Not-ECT
\plain\cf1\fs18 \par 
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Total Length:         \plain\cf1\fs18 1162
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Identifier:           \plain\cf1\fs18 40240
\plain\cf1\fs18 \par   Fragmentation Flags:  \plain\cf1\fs18 %010
\plain\cf1\fs18 \par                         \plain\i\cf7\fs16 0.. Reserved
\plain\cf1\fs18 \par                         \plain\i\cf7\fs16 .1. Do Not Fragment
\plain\cf1\fs18 \par                         \plain\i\cf7\fs16 ..0 Last Fragment
\plain\cf1\fs18 \par 
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Fragment Offset:      \plain\cf1\fs18 0  \plain\i\cf7\fs16 (\plain\i\cf7\fs16 0\plain\i\cf7\fs16  bytes)
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Time To Live:         \plain\cf1\fs18 64
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Protocol:             \plain\cf1\fs18 6  \plain\i\cf7\fs16 TCP - Transmission Control Protocol
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Header Checksum:      \plain\cf1\fs18 0xDA4F
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Source IP Address:    \plain\cf1\fs18 192.168.1.101
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Dest. IP Address:     \plain\cf1\fs18 221.176.31.48
\plain\cf1\fs18 \par \plain\ul\b\cf4\fs18 TCP - Transport Control Protocol
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Source Port:          \plain\cf1\fs18 3907
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Destination Port:     \plain\cf1\fs18 8080
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Sequence Number:      \plain\cf1\fs18 1182196538
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Ack Number:           \plain\cf1\fs18 1841523278
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 TCP Offset:           \plain\cf1\fs18 8  \plain\i\cf7\fs16 (\plain\i\cf7\fs16 32\plain\i\cf7\fs16  bytes)
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Reserved:             \plain\cf1\fs18 %0000
\plain\cf1\fs18 \par   TCP Flags:            \plain\cf1\fs18 %00011000  \plain\i\cf7\fs16 .\plain\i\cf7\fs16 .\plain\i\cf7\fs16 .\plain\i\cf7\fs16 A\plain\i\cf7\fs16 P\plain\i\cf7\fs16 .\plain\i\cf7\fs16 .\plain\i\cf7\fs16 .
\plain\cf1\fs18 \par                         \plain\i\cf7\fs16 0... .... (No Congestion Window Reduction)
\plain\cf1\fs18 \par                         \plain\i\cf7\fs16 .0.. .... (No ECN-Echo)
\plain\cf1\fs18 \par                         \plain\i\cf7\fs16 ..0. .... (No Urgent pointer)
\plain\cf1\fs18 \par                         \plain\i\cf7\fs16 ...1 .... Ack
\plain\cf1\fs18 \par                         \plain\i\cf7\fs16 .... 1... Push
\plain\cf1\fs18 \par                         \plain\i\cf7\fs16 .... .0.. (No Reset)
\plain\cf1\fs18 \par                         \plain\i\cf7\fs16 .... ..0. (No SYN)
\plain\cf1\fs18 \par                         \plain\i\cf7\fs16 .... ...0 (No FIN)
\plain\cf1\fs18 \par 
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Window:               \plain\cf1\fs18 32643
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 TCP Checksum:         \plain\cf1\fs18 0x3133
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Urgent Pointer:       \plain\cf1\fs18 0
\plain\cf1\fs18 \par \plain\cf4\fs16 TCP Options:
\plain\cf1\fs18 \par   Option Type:          \plain\cf1\fs18 1  \plain\i\cf7\fs16 No Operation
\plain\cf1\fs18 \par 
\plain\cf1\fs18 \par   Option Type:          \plain\cf1\fs18 1  \plain\i\cf7\fs16 No Operation
\plain\cf1\fs18 \par 
\plain\cf1\fs18 \par   Option Type:          \plain\cf1\fs18 8  \plain\i\cf7\fs16 Timestamp
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Length:               \plain\cf1\fs18 10
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 TS Value:             \plain\cf1\fs18 0x00028BC5 00:02:46.853
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Echo Reply:           \plain\cf1\fs18 0x07E7E436
\plain\cf1\fs18 \par 
\plain\cf1\fs18 \par 
\plain\cf1\fs18 \par \plain\ul\b\cf4\fs18 HTTP - Hyper Text Transfer Protocol
\plain\cf1\fs18 \par   \plain\i\cf7\fs16 Continuation of existing HTTP stream
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Line  \plain\b\cf6\fs18 1\plain\b\cf6\fs18 :              \plain\cf1\fs18 R fetion.com.cn SIP-C/4.0\plain\i\cf7\fs16 <CR>\plain\i\cf7\fs16 <LF>
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Line  \plain\b\cf6\fs18 2\plain\b\cf6\fs18 :              \plain\cf1\fs18 F: 899502585\plain\i\cf7\fs16 <CR>\plain\i\cf7\fs16 <LF>
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Line  \plain\b\cf6\fs18 3\plain\b\cf6\fs18 :              \plain\cf1\fs18 I: 1 \plain\i\cf7\fs16 <CR>\plain\i\cf7\fs16 <LF>
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Line  \plain\b\cf6\fs18 4\plain\b\cf6\fs18 :              \plain\cf1\fs18 Q: 2 R\plain\i\cf7\fs16 <CR>\plain\i\cf7\fs16 <LF>
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Line  \plain\b\cf6\fs18 5\plain\b\cf6\fs18 :              \plain\cf1\fs18 A: Digest algorithm="SHA1-sess-v4",response="6c63a6e008b9ff4b2b392cb437abe5097da
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Line                  \plain\cf1\fs18 6f532e8d4b0e4967b966fd341629d558f16a18de4d1a855c1477b1084f955cc94981c91207bacad7
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Line                  \plain\cf1\fs18 dcefea07fcdfdf3a0be96e797e86698a392135b6059a9818df4bb926c39b49ea905399c87a2606bc
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Line                  \plain\cf1\fs18 4d2e39d27c35c3e080581a03d3f5e4960eeea46ebefb20ef2b054156b7c2e"\plain\i\cf7\fs16 <CR>\plain\i\cf7\fs16 <LF>
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Line  \plain\b\cf6\fs18 6\plain\b\cf6\fs18 :              \plain\cf1\fs18 A: Verify algorithm="picc-PasswordErrorMax",type="GeneralPic",response="gfcp",ch
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Line                  \plain\cf1\fs18 id="659b49e0-9efa-4e22-8f31-19305d229da0"\plain\i\cf7\fs16 <CR>\plain\i\cf7\fs16 <LF>
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Line  \plain\b\cf6\fs18 7\plain\b\cf6\fs18 :              \plain\cf1\fs18 L: 617\plain\i\cf7\fs16 <CR>\plain\i\cf7\fs16 <LF>\plain\i\cf7\fs16 <CR>\plain\i\cf7\fs16 <LF>
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Line  \plain\b\cf6\fs18 8\plain\b\cf6\fs18 :              \plain\cf1\fs18 <args><device accept-language="default" machine-code="215D92DBC876FB23C80FE2EDB4
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Line                  \plain\cf1\fs18 BDFDF5" /><caps value="1FFF" /><events value="7F" /><user-info mobile-no="138189
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Line                  \plain\cf1\fs18 42684" user-id="635450773"><personal version="0" attributes="v4default;alv2-vers
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Line                  \plain\cf1\fs18 ion;alv2-warn;dynamic-version;restricted" /><custom-config version="346165607" /
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Line                  \plain\cf1\fs18 ><contact-list version="0" buddy-attributes="v4default" /></user-info><credentia
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Line                  \plain\cf1\fs18 ls domains="fetion.com.cn;m161.com.cn;www.ikuwa.cn;games.fetion.com.cn;turn.feti
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Line                  \plain\cf1\fs18 on.com.cn;pos.fetion.com.cn;ent.fetion.com.cn;mms.fetion.com.cn" /><presence><ba
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Line                  \plain\cf1\fs18 sic value="400" desc="" /><extendeds /></presence></args>
\plain\cf1\fs18 \par \plain\ul\b\cf4\fs18 FCS - Frame Check Sequence
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 FCS:                  \plain\cf1\fs18 0x402344C2  \plain\i\cf7\fs16 Calculated} 